Assigning common fields with series of process id

Hello i have a application where it will generate a process id for each log and one process id will be having 8 different stages of logs.But there is one specific field will be coming as part of 1st stage of log but remaining stages of log wont have that field . is there a way i can assign that specific field in stage one to all log files while ingesting as a field in logstash. The time gap between the each stage of log files is in milli seconds.

Provided that log entries are never interleaved, and you use "--pipeline.workers 1" and do not use "--experimental-java-execution" you could do it using something similar to this.

Well no guaranty that logs are interleaved , no other way :frowning:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.